From: unruh@invalid.ca   
      
   On 2012-06-10, Bit Twister  wrote:   
   >   
   > I was not worried about a brute force attack because of the current   
   > login fail attempt lockout counter setting.   
      
   The problem is not doing brute force on the computer itself. The problem   
   is if someone gets the /etc/shadow file ( via some root breaking) and   
   then doing brute force on that file.   
   That is what the hash protects against. It does not protect in any way   
   against someone trying multiple passwords on the computer itself.   
   It matters not a whit what hash is used in that case.   
      
   >   
   > If I need a stronger password I can use something like   
   >     head -c 5 /dev/urandom | md5sum | cut -c-32   
   > or  openssl rand 32 | md5sum | cut -c-32   
   > where md5sum can be any one of other /usr/bin/sha* programs.  :-8   
      
   And you will never remember it.   
      
   >   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)